Ever felt like you needed some more options to store data in Entra, or the pain of having to figure out what, when and where data is stored? me too... Join me as I go over the ultimate way to manage ...

Today I want to share something I’ve been working on for a while now - a Progressive Web App (PWA) version of my PowerShell-based tool, PIMActivation!Back in October 2025 I released the first version ...

Conditional Access is one of, if not the, strongest tools in our kit for securing access to our organizations. And it seems to be on the cusp of becoming even stronger.Some time ago, while scrolling t...

Emergencies happen every day. Most of the time, they happen to someone else.Until the day they happen to you - then what?We all know things can go wrong, but most organizations do not spend much time ...

PowerShell security reporting framework for Microsoft 365 identity posture assessment. Analyzes Authentication Context, PIM, Conditional Access & more. - Noble-Effeciency13/M365IdentityPosture

We’re already sending emails securely, now it’s time to secure inbound email as well!Back in 2022, Microsoft enabled outbound SMTP DANE with DNSSEC for all Exchange Online customers, including MSA (ho...

Sending an email securely requires more moving parts than most people expect, you don’t notice when it works. You really notice when it doesn’t!Email is still one of the most critical, and most abused...

PIMActivation is a PowerShell module designed to streamline Microsoft Entra Privileged Identity Management (PIM) activations. It supports bulk role activations while dynamically adhering to the spe...

Today I want to walk through how to configure Azure App Service Authentication when your App Service sits behind Azure Front Door and is accessed through a Private Link.On a dreadful day in october 20...

Learn about Security Copilot availability in Microsoft 365 (ME5)

When it comes to securing your multicloud environment, Microsoft Defender Cloud Security Posture Management offers a powerful suite of agentless...

We’ve covered what Authentication Contexts are, why they matter, and how they help us strengthen access and data security in Microsoft 365.Now it’s time to answer the next question - how do we monito...

With identities and access strengthened in part 2, it’s time to turn our focus to real-world data protection with Authentication Contexts.One of the more underused capabilities of Authentication Conte...

In Part 1 of this mini-series, we explored the what, why, and how of Microsoft Entra Authentication Contexts, laying the foundation for what they are and how they work. In this second part, we’ll buil...

Over my last few posts, I’ve casually mentioned Authentication Context a few times, so I thought it was about time we gave the feature a proper spotlight.Within Microsoft Entra, we sometimes encounter...

Getting annoyed or impatient when activating eligible roles in PIM — especially multiple roles at once? You’re not alone. Today, I’m sharing a solution to take the pain out of the process.Whenever I t...

Managing external users is one of the most tedious—but also critical—challenges in a Microsoft Business Premium environment.With authentication, authorization, and password security covered in earlier...

Managing new guest accounts can be a daunting task—especially when you’re dealing with high turnover, distributed teams, or unknown user lists. Today, I’ll show you how Microsoft Entra User Flows, oth...

With authentication & authorization covered in the previous posts of the series, it's now time to dive into strengthening our password policies, empowering end-users, and enhancing overall password se...

In Part 02, we explored authentication, the process of verifying user identities—ensuring users are who they claim to be. Today we’ll build on that by diving into authorization—the process of determin...

In my last post I covered how to monitor the GOD Mode in Azure (Coined by the great John Savill). While visibility and monitoring are great capabilities, there’s a big issue: the permanent nature of t...

Elevating access to manage Azure subscriptions is a valuable tool for administrators, particularly when dealing with unknown or orphaned subscriptions. However, with no built-in restrictions on when o...

In the first part of this series, we laid the foundation for securing Microsoft Business Premium environments, covering the core security principles and configurations. Now, we shift our focus to auth...

Protecting highly critical configurations in our Entra tenants has never been easier! Join me as we explore Protected Actions in Microsoft Entra and how they help us lock down security-sensitive opera...

Today kicks off a comprehensive blog series where I’ll delve into the security features of the Business Premium license SKU, offering detailed step-by-step guidance and best practices.In this first in...

Managing emails for unlicensed admin accounts? Juggling a shared mailbox flooded with notifications from services and clients? Today’s solution: Plus addressing!In the world of IT administration, jugg...

As the season for audits approaches (though, let’s be honest, auditing should be an all-year-round endeavor), I’m excited to share a practical solution for managing role assignments across your tenant.Managing role assignments can feel overwhelming, especially when multiple administrators are involved in assigning, monitoring, auditing, and managing roles. It’s rarely a one-person job, and the complexities only grow with the scale of your organization.Combine that with increasing regulatory dema

Welcome to Microsoft Entra, where Zero Trust, permissions, and the infamous policy change await. Buckle up—this rabbit hole goes deep!IAM, or Identity & Access Management, is undoubtedly one of the most critical pillars of cybersecurity. The reason for this is simple: we want to trip up adversaries as much as possible while still allowing our end users access to necessary data, applications, and more, all while adhering to the Zero Trust principles—Assume Breach, Verify Explicitly, and Use Least

A collection of Microsoft 365 licensing diagrams to view or download.

Announcing the Public Preview of Managed Identities as Federated Identity Credentials for Microsoft Entra.

After years of neglect, no one was terribly surprised when Microsoft said that MDT would not support Windows 11. Even prior to that, it was often up to the community to keep things working as new W…

Join me as I connect the dots from my previous posts on the fundamental Identity Governance features in Microsoft Entra with Lifecycle Workflows!Managing user lifecycles through Access Reviews, Access...